From b263c106de0137d6f49fdf34cf4a3958c4d13c6a Mon Sep 17 00:00:00 2001 From: Matt Caswell Date: Thu, 10 Nov 2016 11:49:06 +0000 Subject: Update CHANGES and NEWS Reviewed-by: Richard Levitte --- NEWS | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'NEWS') diff --git a/NEWS b/NEWS index 81315becfd..87658ddaf3 100644 --- a/NEWS +++ b/NEWS @@ -7,7 +7,9 @@ Major changes between OpenSSL 1.1.0b and OpenSSL 1.1.0c [under development] - o + o ChaCha20/Poly1305 heap-buffer-overflow (CVE-2016-7054) + o CMS Null dereference (CVE-2016-7053) + o Montgomery multiplication may produce incorrect results (CVE-2016-7055) Major changes between OpenSSL 1.1.0a and OpenSSL 1.1.0b [26 Sep 2016] -- cgit v1.2.3